The Long Version

By age 9 I was running a small operation, burning modded game CDs and selling them at school so I could afford snacks. By 12 I was running game servers for thousands of players. By 19 I was doing university and full-time work simultaneously because someone had to pay tuition. Now I'm building tools I wish existed and shipping them to real users.

Ever since I got my first computer around age 5, I spent most of my time playing video games. GTA, NFS, Barn Buddy consumed most of my childhood, but somewhere along the way I stopped just playing and started wondering how everything actually worked. I'd download mods, try to figure out how they changed the game, and eventually got decent at putting together my own modpacks. That small operation I mentioned? Yeah, I was a fat kid who needed snack money.

This curiosity about how things worked under the hood kept growing. At some point I decided I wanted to try this thing called Linux I'd heard about online. I managed to get Ubuntu 10.04 installed, felt like a proper hacker for about five minutes, and then I realized I had done a full disk format that wiped every photo my parents had collected over the years. They weren't happy about that one. But that's kind of how I've always learned. Get my hands on something, break it, figure out why.

As I got older I moved on to multiplayer games. What fascinated me wasn't just playing them but understanding how the netcode worked. How everything stayed perfectly synced across players even though these games were made years ago on way less sophisticated infrastructure. The local COD4 servers in my region kept going offline because people would DDoS them constantly. I figured if they can run servers, why can't I? Only problem was I didn't have any money.

So I asked the people I played with for help. Most of them were older guys with actual jobs, and they pooled together enough to get me a $5 a month DigitalOcean server. I spent the next few weeks trying to figure out how to actually host a game server, following tutorials from sketchy forums that were probably outdated by the time I found them. Eventually I got something working.

My servers got hit by DDoS attacks too. Instead of just accepting it I started learning how these attacks actually worked. Turned out most of the attackers were script kiddies plugging IP addresses into free stress testing websites, so all the traffic came from single sources. Once I understood that, I put Cloudflare in front and set up fail2ban to block UDP floods. Nothing fancy, but it worked. While other servers in the region kept going down, mine stayed up.

People started asking if I could host servers for them. I'm the type of person who would rather spend 10 hours automating a 10-minute task than do the same thing twice, so I built a small web app with Django that auto-provisioned servers. Looking back, that was basically a textbook remote code execution vulnerability waiting to happen, but I didn't know any better. I dug into the IW engine code to make the servers run smoother, found a SQL injection vulnerability in B3, one of the popular open source COD4 management tools, and submitted a fix. Since I didn't have a bank account (I was 12 or 13 at this point), I asked people to pay me in Riot Points so I could buy League of Legends skins. I had absolutely no concept of how money worked back then.

Around this same time robotics competitions started popping up all over Sri Lanka. Simple line following at first, then maze solving, then picking up and moving objects. Most people used IR sensors and kept hacking edge cases on top to handle whatever new challenge appeared. I started the same way, messing around with Arduinos and IR sensors. Probably burned through 10+ chips and shocked myself more times than I can count.

Eventually I got tired of the edge cases and tried something different. I got a Raspberry Pi, stuck a cheap webcam on top of the robot, and wrote a simulation that could generate thousands of random mazes. Then I trained a basic ML classifier that would look at the camera feed and decide whether to go left or right. After enough training it could solve mazes and pick up small objects using a robotic arm I'd cobbled together from cheap servo motors. It was extremely slow compared to the IR sensor robots and not particularly accurate. I didn't care. Winning was never really the point. I just wanted to see if it would work.

A-Levels didn't go the way they were supposed to. I sat IT, Math, and Physics but spent most of the time building things instead of studying. I aced IT and failed both Math and Physics. Almost every university in Sri Lanka required a passing grade in all three, which made the situation pretty clear. Except there was one that used a points system. A=12, B=8, C=6, S=4, with a 12-point minimum. My single A in IT was worth exactly 12 points. The admissions office didn't know what to do with me and escalated to the dean. Their rules didn't explicitly disqualify my situation. They let me in.

After finishing school I had to figure out what to do next, which turned out to be more complicated than I expected. Government unis in Sri Lanka took around 6 years to graduate back then. Private unis were more expensive and had less reputation but you could finish in under 4 years. I didn't really know which path made sense, so I started asking around, talking to anyone in tech who would give me the time of day. One of them happened to run a startup. After I told him about the server hosting and all the random stuff I'd built over the years, he offered to let me help design their cloud infrastructure. It was a lot of trust to put in someone who had literally just finished school, but I think he could tell I'd figure things out the same way I always had.

My parents weren't rich, so the job wasn't just about getting experience. It was how I paid for uni. I ended up doing both full time, which sounds insane when I say it out loud, but that's just how it worked out. I'd be sitting in lectures with my laptop open working on infrastructure stuff, constantly trying to balance deadlines from both sides. Lots of sleepless nights living off kotthu. It was exhausting and I definitely wouldn't recommend it, but I learned to manage my time in ways I never would have otherwise.

By the time my official placement year came around I wasn't really an intern anymore. I was just a regular engineer doing regular engineer things, except younger and more sleep deprived. Uni wasn't just about the job though. I went to way too many hackathons, probably more than was healthy for my grades. But that's where I met most of my friends and built some of the coolest things I've ever worked on. There's something about staying up all night with a group of people, running on energy drinks and desperation, trying to make something work before the deadline that bonds you in a weird way. I genuinely learned more from those weekends than from a lot of my actual coursework.

Somewhere in the middle of all this chaos I applied to Google Summer of Code and got in with SUSE. They paired me with an engineer who mentored me through building a Kubernetes operator from scratch. It was the first time I'd worked with someone at that level who actually took the time to explain how open source projects work from the inside. The things he taught me about writing operators and thinking about distributed systems stuck with me.

For my final year thesis I wanted to figure out if you could automatically detect what went wrong when things fail in complex systems. While researching how to collect data without instrumenting every application, I stumbled onto eBPF. It genuinely seemed like magic. You could hook into the kernel and observe everything happening on a system without touching the application code at all. I built a system that used eBPF to collect telemetry and machine learning to find root causes of failures.

As part of validating the research I had to get feedback from industry experts. One of the people I showed it to happened to be a solutions architect at WSO2. I just wanted honest feedback on whether what I'd built actually made sense. He asked if he could refer me internally.

Somehow, despite all of it, the person the admissions office had to escalate to the dean graduated 4th in their class. First Class Honours. The university patched the rule the following year, which I choose to interpret as a compliment.

WSO2 had been on my radar since I was 17. In Sri Lanka it's kind of like Google, the place where a lot of strong engineers end up. I remember looking at their careers page back in school thinking that's where I'd learn to build at scale. So when that referral turned into an offer, before I'd even finished my final year, it felt like everything was clicking into place.

I joined as a Software Engineer. The first thing I pushed for was leading the CNI migration, moving a 10,000+ pod production cluster from Azure to Cilium while keeping 99.9% SLA. That went well enough that I kept pulling on threads: eBPF, Pixie, the observability layer. I found 80 security issues in Pixie along the way. Fixed them. Most were outside my assigned scope.

By the time I was promoted to Senior Software Engineer I was running the entire eBPF observability stack. About 500GB of telemetry a day, zero instrumentation overhead. The kind of work I used to read about in blog posts during university and wonder how people even approached it.

A couple of years later I was promoted to Associate Technical Lead. Now I work on OpenChoreo, the open source internal developer platform we contributed to the CNCF, now a CNCF Sandbox project. The focus has shifted from deep infrastructure to making the platform actually approachable: onboarding that works in under 15 minutes, docs that teach while they guide. Most recently I've been leading the MCP and Skills integration, figuring out what it takes to build agent tools that hold up in real production loops, not just in demos.

Outside of work, I'm shipping products people actually use. Enki started as a bookmarking tool I built for myself and now has 1,200+ users. TopPics is on the Chrome Web Store helping people clean up their Google Photos. And Forge is my biggest bet yet, a batteries-included framework for shipping SaaS without drowning in infrastructure. Auth, jobs, workflows, observability, all out of the box. I've always operated like a founder, even when I wasn't one. See a problem, build a solution, ship it. That instinct hasn't changed since I was automating game server provisioning at 12.